rlwj-lab/opsx-vpn
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
58 Commits 1 Branch 0 Tags
88ea6b78542ac570f6a50107d824031c27efb8be
Commit Graph
58 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Codex 88ea6b7854 feat: configure HTTP/HTTPS public entry and managed certificates 2026-10-26 14:06:41 +08:00
Codex 35596cda9d feat(frontend): UI P0 PageHeader + 身份三卡 + 专线抽屉密度 
按设计纸落地全站页头规范、飞书 OIDC 状态/凭据/地址同步三卡，以及专线列表筛选独立行、行点击 480 抽屉与启停+更多操作列。
 2026-10-26 12:46:59 +08:00
Codex a9bc68cd28 fix(frontend): polish cert dialog and wire upload API 
Prefer drag-and-drop for crt/key with PEM paste collapsed; rename
primary actions; add HTTP-01 prechecks. Upload posts to
POST /system/tls/certificate with cert_source from status.
 2026-10-26 11:40:11 +08:00
Codex df3e119099 fix(frontend): align gateway fields with public_base API 
Read configured_scheme/port and management_public_base; PUT domain
with scheme/port only as backend expects.
 2026-10-26 11:37:00 +08:00
Codex ef838ad68b feat(frontend): public entry scheme/port and certificate dialog 
Add gateway scheme/host/port with derived Base URL, certificate list
plus upload/HTTP-01 dialog, soften identity https-only gate, and let
OIDC guide inherit public base from readiness when available.
 2026-10-26 11:29:58 +08:00
Codex 871b94486f docs: record deployed alert verification limits 2026-10-23 17:53:13 +08:00
Codex 1273f226fd feat: configurable traffic threshold and Feishu bot alerts 2026-10-23 17:49:19 +08:00
Codex 3e6e481b79 feat(frontend): give IPSec peer setup a responsive workflow 2026-10-23 16:29:48 +08:00
Codex 94ec3b042b chore(frontend): drop unused logs.connCount locale keys 
Remove dead connection-count copy left after retention card cleanup.
 2026-10-23 16:19:10 +08:00
Codex 76bfda8627 docs+feat: record backlog tip and move custom protocols to More 
Document delivered IA and backlog four items; put custom plugins under
the wizard More group per design.
 2026-10-23 16:17:43 +08:00
Codex 9984e21930 feat(frontend): finish backlog UX for audit, dashboard, wizard 
Wire sessions audit to paged connection-logs with filters/export,
drop connection-count from log retention, add dashboard quick cards,
and group tunnel wizard protocols by scene.
 2026-10-23 16:16:50 +08:00
Codex f01d3dc5ea feat(frontend): align console IA with integrations sidebar 
Add 对接与扩展 (IPSec, Feishu/OIDC, Plugins, Nodes), move identity
out of settings onto /identity, make sessions/logs tab-deep-linkable,
and rename ops audit / dial-in / admin labels to match the locked nav.
 2026-10-23 16:12:02 +08:00
Codex 7f80f0f7ce Clarify Feishu upstream names and simplify sync copy 2026-10-23 14:44:40 +08:00
Codex 9e8f86a345 Record live Feishu visibility and sync results 2026-10-23 14:38:55 +08:00
Codex e2597719c8 Check Feishu directory scope and highlight app availability 2026-10-23 14:35:09 +08:00
Codex bf9e1c3c2c Record Feishu application visibility verification 2026-10-23 11:21:41 +08:00
Codex 594bb61cef Show Feishu app visibility and preserve sync toggle 2026-10-23 11:19:15 +08:00
Codex e5375deeb2 Import Feishu directory with optional 30-minute sync 2026-10-23 11:10:59 +08:00
Codex 4096b93da3 Clarify Feishu permissions and verify name lookup scope 2026-10-23 02:25:15 +08:00
Codex 46390194ee Explain Feishu basic profile permission in identity diagnostics 2026-10-23 02:11:29 +08:00
Codex d4eddf7365 Resolve Feishu names by verified open ID and scope VPN member access 2026-10-23 02:02:52 +08:00
Codex 578a58a129 Record OpenVPN 2.7 test upgrade and remaining SSO verification 2026-10-23 00:20:14 +08:00
Codex db3092344f Enable Feishu session username override with OpenVPN 2.7 2026-10-23 00:05:59 +08:00
opsx 8fd8c0cd73 Bind Feishu identity to OpenVPN sessions and refine management UI 2026-10-22 23:24:41 +08:00
opsx 347799cb1e Align management UI with web design guide 2026-10-22 21:46:28 +08:00
opsx 373a0904be Improve Feishu permission checks and OpenVPN auth result page 2026-10-22 21:13:27 +08:00
opsx 0231c376c6 Correct Feishu login scope for OpenVPN OIDC 2026-10-22 20:03:23 +08:00
opsx ff2db503ab Sync OpenVPN OAuth gateway routes on tunnel changes 2026-10-22 19:50:24 +08:00
opsx 9e26358df0 Show Feishu tenant lookup progress and remaining setup 2026-10-22 19:22:36 +08:00
opsx 7e50443bba Guide Feishu app setup and surface tenant lookup codes 2026-10-22 19:09:57 +08:00
opsx eb3861bbe8 Fetch Feishu tenant identity from app credentials 2026-10-22 14:31:39 +08:00
opsx 0528bc4b9a Sync managed gateway routes on startup and fix layout initialization 2026-10-22 10:49:32 +08:00
opsx 5ef1cb48cf Clarify Feishu app setup and OpenVPN OIDC source 2026-10-22 10:12:06 +08:00
opsx 63cdda4ae1 Add opt-in built-in Feishu OIDC issuer for OpenVPN 2026-10-22 09:47:54 +08:00
opsx 6ca609fde4 Suggest configured HTTPS domain for OpenVPN OIDC entry 2026-10-22 09:00:11 +08:00
opsx 16955c3126 Redesign console navigation and settings tabs 2026-10-22 08:09:41 +08:00
opsx ea9c885a15 Show OpenVPN OIDC prerequisites and exposed management port 2026-10-22 08:03:08 +08:00
opsx 64f1d89a2f Record HTTPS gateway deployment and renewal verification 2026-10-22 06:54:16 +08:00
opsx cb28b235ef Add managed Nginx HTTP-01 gateway activation and certificate status 2026-10-22 01:08:14 +08:00
opsx 6a1bace3e9 Refresh tunnel actions promptly and clarify Feishu OIDC setup 2026-10-22 00:01:12 +08:00
opsx 41fb9d5631 Refine WireGuard client routing and authentication UI 2026-10-21 21:10:53 +08:00
opsx eabb3e4472 Add bundled WireGuard diagnostics and application proxy 2026-10-21 18:00:21 +08:00
opsx 6dd3c7dd45 feat(client): add authorized WireGuard device enrollment and desktop connection 2026-10-21 14:53:55 +08:00
opsx d2f1f5040e feat(tls): add optional nginx setup and gateway preview 2026-10-21 11:33:44 +08:00
opsx 9f743e19ad feat(client): replace placeholder connection data with live status 2026-10-21 11:32:41 +08:00
opsx 00f6c876cf feat(tls): manage ACME domain and add desktop client settings 2026-10-21 10:25:55 +08:00
opsx 003f755b37 feat(openvpn): suggest available OIDC ports and add deployment assets 2026-10-21 01:19:49 +08:00
opsx d6a9a92ad0 feat(openvpn): add OIDC browser authentication and setup guide 2026-10-20 23:31:46 +08:00
opsx 5107f134dd fix(openvpn): 依赖检测纳入 easy-rsa，避免「已就绪」却无法下发客户端配置 
现象：装了 openvpn 但缺 easy-rsa 时，协议状态显示已就绪；创建 OpenVPN 隧道后
生成客户端配置报 open .../pki/ca.crt: no such file or directory。

原因：PKI 自动初始化要求 easyRSAPath() != ""，缺 easy-rsa 时静默跳过；
而 binmgr.CheckBinary(openvpn) 只检测 openvpn 二进制，未校验 easy-rsa。

修复：
- binmgr 新增 easyRSAAvailable()，兼容 PATH 与 /usr/share/easy-rsa/*
- CheckBinary(openvpn) 在 easy-rsa 缺失时置 installed=false（前端即显示未就绪）
- README 依赖清单补 easy-rsa、xl2tpd

验证：隐藏 /usr/share/easy-rsa 后 /api/binaries/status 中 openvpn installed=false，
恢复后 true。
 2026-10-20 21:48:05 +08:00
opsx a15786ea84 feat: 主机环境一键初始化（页面内装依赖 + 修转发/GRE） 
- 新增 GET /api/system/env：主机环境体检
  * 运行权限 / IPv4 转发 / GRE 内核模块 / 包管理器 / 各协议依赖 / xl2tpd
  * 返回 failed/blocking/ready 汇总，供前端渲染与门控
- 新增 POST /api/system/fix：白名单修复动作
  * ip_forward：sysctl 开启 + 持久化到 /etc/sysctl.d/99-opsx-vpn.conf
  * gre_module：modprobe + 持久化到 /etc/modules-load.d/opsx-vpn.conf
  * install:<协议>：复用 binmgr.InstallViaPackageManager（apt/yum/dnf/apk/pacman）
  * tool:xl2tpd：L2TP 依赖补齐
  * 仅 admin 可调用；actions 与协议名均走白名单，绝不接受调用方传入命令串；全部写审计日志
- Dashboard：协议「安装命令」按钮改为「一键安装」（调 /binaries/install，含包管理器降级）
- Dashboard：主机前提警告条新增「一键修复」按钮（按缺失项逐项修复）
- i18n：中英文补齐 oneClickInstall / oneClickFix / fixSuccess / fixFailed / fixNeedRoot / fixNothing
 2026-10-20 21:32:53 +08:00